Slapd can't resolve host, during kerberization

Question

I've been trying to set up our OD/AD for ever with mixed success. I think I've worked out the last bugs in our odd setup but I'm stuck on one strange issue.
I've been backing out of AD bind and OD Master to Standalone Server to remove all the dir settings. Iv'e also cleaned out everything related to Directory services. I've removed the approiate files in /Library/Preferences and /var/db/
Right now, when I try to set up the server as a OD Master, It seems to go fine but the KDC doesn't start up. I get the "Kerberize" button. When I hit "Kerberize", I get he log in and it fails (login keeps reappearing).
When I check slapd's log, It claims it can't resolve my server's hostname and slapdconf -kerberise fails as a result.
I don't get it.
The hostname is set Properly:
I've set my hostname in Sys Prefs -> Sharing. I've even set it manually in /etc/hostconfig
If I "echo $HOSTNAME" I get the proper hostname. If I "hostname" I get the proper hostname.
The slapd logs report the proper hostname in the error.
DNS appears fine:
I can 'nslookup hostname' and it resolves to IP. I can 'nslookup FQDN' and it resolves fine. I've even entered the IP and hostname into /etc/hosts.
One thing is odd. If I 'dig hostname' I get the hostname back with a period. Dig doesn't seem able to resolve just a hostname. Output looks like this:
Chimp:~ sbandyk$ dig psd-directory.uchicago.edu
<< cut some junk, SB >>
;; QUESTION SECTION:
;psd-directory.uchicago.edu. IN A
;; ANSWER SECTION:
psd-directory.uchicago.edu. 169942 IN A 128.135.136.55
BUT.......
Chimp:~ sbandyk$ dig psd-directory
<< cut some junk, SB >>
;; QUESTION SECTION:
;psd-directory. IN A
I don't get an answer section. I see the same thing on other linux systems in our network (same DNS). Is there any reason why dig isn't returning info on just a hostname? It doesn't seem to use my search domains.
Is this another symptom of a DNS problem that is screwing up my Kerberos krb5kdc setup?
Is there some common issue with slapd and resolving hosts?
thanks,
Steven

Answer 1

I've been trying to set up our OD/AD for ever with
mixed success. I think I've worked out the last bugs
in our odd setup but I'm stuck on one strange issue.
I've been backing out of AD bind and OD Master to
Standalone Server to remove all the dir settings.
Iv'e also cleaned out everything related to
Directory services. I've removed the approiate
files in /Library/Preferences and /var/db/
Best to remove /etc/krb5.keytab too!
Is there any reason why dig isn't returning info on just a hostname?
It doesn't seem to use my search domains.
Thats just the way dig works. It wants FQDN and doesn't use your search domain.
Is this another symptom of a DNS problem that is
screwing up my Kerberos krb5kdc setup?
No.
Is there some common issue with slapd and resolving
hosts?
You seem to be able to resolve name -> ip. But the opposite is necessary too: ip -> name !
So when issuing:
$ host IP_ADDRESS
it should come up with you FQDN.
HTH
-Ralph